CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...

CVE-2021-29271

Remark42 prior to version 1.6.1 contains a cross-site scripting (XSS) vulnerability in backend/app/store/comment.go and backend/app/store/service/service.go, exploitable via an XSS payload in the Locator URL. Affected: remark42

Dmitry Verkhoturov remark42 跨站脚本漏洞

Dmitry Verkhoturov remark42 is an open source application by Dmitry Verkhoturov. A self-hosted, lightweight and simple not yet functional annotation engine that does not spy on users. A cross-site scripting vulnerability exists in remark42 before 1.6.1, which stems from backend/app/store/comment....